Phylum Dev Cli Versions Save

Added

• PNPM v9 lockfile support
• Support for parsing go.mod files with a Go directive of version 1.17 and higher

Changed

• Improved go.sum file parsing to prevent the parser from listing unused packages

Fixed

• Sandboxed processes sticking around after CLI is killed with a signal
• Lockfiles with local versions breaking the pip parser

Fixed

• Improve parsing of non-UTF-8 encoded pom.xml files
• SPDX SBOM registry determination from downloadLocation
• SPDX parsing adding the described package as a dependency
• SPDX parsing certain text files with optional package fields

Fixed

• Crashes when parsing invalid lockfiles

Removed

• phylum group transfer subcommand
• Owner email from phylum group list results

Fixed

• Improved sandboxing error message for unsupported kernel versions

Fixed

• Python lockfile generation with pip in ~/.local
• Python lockfile generation with pyenv

Fixed

• Python lockfile generation with pip in ~/.local
• Python lockfile generation with pyenv

Added

• Parse manifest files with non-standard names

Fixed

• Lockfile generation for gradle installed under /opt/gradle

Added

• Add CVE data to issueDetails entries when --json flag is used for phylum package

Changed

• Renamed multiple CLI arguments to avoid the term lockfile in places where manifests are also accepted
• Renamed lockfiles key in phylum status --json output to dependency_files

Added

• Add CVE data to issueDetails entries when --json flag is used for phylum package

Changed

• Renamed multiple CLI arguments to avoid the term lockfile in places where manifests are also accepted
• Renamed lockfiles key in phylum status --json output to dependency_files